GCVE - cpe:2.3:a:jenkins:deployment_dashboard:*:*:*:*:*:jenkins:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:deployment_dashboard:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	Deployment Dashboard (`ef0c9ac1-f9ae-5f61-85fd-d20fb844852a`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/codecentric/jenkins-deployment-dashboard-plugin`	purl2cpe	2026-06-01 10:14:17.817472
`pkg:github/jenkinsci/ec2-deployment-dashboard`	purl2cpe	2026-06-01 10:14:17.817474

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-50775`	vulnerable	2026-06-08 06:16:16.657817	Details available A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers to copy jobs. Published: 2023-12-13T17:30:20.742Z Updated: 2025-02-13T17:19:37.661Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3092 http://www.openwall.com/lists/oss-security/2023/12/13/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-34799`	vulnerable	2026-06-08 05:46:03.459371	Details available Jenkins Deployment Dashboard Plugin 1.0.10 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system. Published: 2022-06-30T17:47:58.000Z Updated: 2024-08-03T09:22:10.422Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2070	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-34798`	vulnerable	2026-06-08 05:46:03.458994	Details available Jenkins Deployment Dashboard Plugin 1.0.10 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified HTTP URL using attacker-specified credentials. Published: 2022-06-30T17:47:52.000Z Updated: 2024-08-03T09:22:09.830Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2798%20%282%29	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-34797`	vulnerable	2026-06-08 05:46:03.458571	Details available A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers to connect to an attacker-specified HTTP URL using attacker-specified credentials. Published: 2022-06-30T17:47:47.000Z Updated: 2024-08-03T09:22:10.429Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2798%20%282%29	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-34796`	vulnerable	2026-06-08 05:46:03.458276	Details available A missing permission check in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Published: 2022-06-30T17:47:42.000Z Updated: 2024-08-03T09:22:10.447Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2798%20%281%29	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-34795`	vulnerable	2026-06-08 05:46:03.457867	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.